AI Connection Terms
These Terms govern the use of Marrow's private links (endpoints) with third-party artificial intelligence tools. They apply in addition to Marrow's general Terms of Use and Privacy Policy.
- The Link is created and controlled by the business's Administrator.
- It is a key: whoever has it sees whatever you allowed. Keep it safe.
- Read-only by default. Actions always require confirmation.
- The data you request reaches your AI provider, and its terms apply too.
- AI can make mistakes. It is not accounting or legal advice.
Scope
These Terms govern the creation and use of private links (“Link” or “Endpoint”) through which third-party artificial intelligence tools (e.g. Claude, ChatGPT, Cursor) gain access to your business's data in Marrow, using the Model Context Protocol (MCP).
The service is provided by Marrow Ai Systems I.K.E., [address], VAT number (ΑΦΜ) [—] (“Marrow”, “we”).
Definitions
“Customer”: the business with an active Marrow subscription. “Administrator”: a user of the Customer with the administrator role. “AI Provider”: the third party that provides the artificial intelligence tool you connect. “Areas”: the categories of data to which access is permitted (e.g. Invoices, Staff). “Actions”: functions that create or modify data or send messages on your behalf.
Creation and management
Only an Administrator can create a Link, from Settings → AI Connection. When creating it you set a name, Areas, permissions (read-only, or read and Actions) and a validity period.
The Link is shown only once and is stored by us in encrypted form. You can revoke it at any time; revocation takes effect immediately. The number of active Links per Customer may be limited depending on the subscription plan.
Security of the Link
The Link works as an access key. Whoever holds it has access to the Areas you defined. You are responsible for keeping it safe, sharing it only with authorised persons and revoking it immediately if you suspect a leak.
Actions carried out with a valid Link are deemed to be carried out by the Customer, up to the moment of revocation.
AI Providers
The AI Provider is an independent third party. We do not control it and are not responsible for its operation, availability, cost or data policy. Its use is governed by its own terms, which you must have accepted.
When your tool requests data through the Link, the results are transmitted to the AI Provider on your instruction. From that point on, the AI Provider processes them under its own terms.
Personal data
For your business's data in Marrow, the Customer is the Data Controller and Marrow the Data Processor, in accordance with the Data Processing Agreement (DPA) and Regulation (EU) 2016/679.
The decision to transmit data, in particular employees' personal data, to an AI Provider is yours. You are responsible for the legal basis, for informing the data subjects and for any transfer outside the EEA. We recommend enabling only the Areas you need.
Marrow does not use your data to train artificial intelligence models.
Actions and confirmation
If you enable Actions, the tool can prepare emails, orders, approvals or other changes. Every Action is presented for explicit confirmation before it is carried out.
AI models can make mistakes. Check the content of every Action before confirming it. Responsibility for confirmed Actions lies with the Customer.
Accuracy of answers
The tool's answers are generated by the AI Provider based on the data Marrow returns. They may be incomplete or incorrect and do not constitute accounting, tax or legal advice. For decisions with financial or legal consequences, verify the figures in Marrow or with your accountant.
Logging and usage limits
We log every call (Link, time, function, result) for security and support purposes. The history is available to the Administrator for [12] months.
Limits may apply to the number of calls per minute or per day, to protect the stability of the service. The current limits are shown in Settings → AI Connection.
Prohibited use
The following are not permitted: sharing a Link with unauthorised persons; automated bulk extraction of data beyond normal use; circumventing limits or security measures; use for purposes that are unlawful or contrary to labour legislation.
Availability and changes
The AI connection is provided “as is”. We make reasonable efforts to keep it running continuously, without guaranteeing uninterrupted availability. We may add, change or remove features; for material changes we will notify the Administrators at least [30] days in advance.
Limitation of liability
To the extent permitted by law, Marrow is not liable for damages arising from: the operation or answers of AI Providers; the use of a Link by a third party because it was not kept safe; Actions you confirmed. Our total liability is limited to the amount of the subscription fees paid in the [12] months before the event.
Suspension and termination
We may suspend a Link without prior notice if we detect abuse or a security risk, informing the Administrator immediately. When the subscription ends, all Links are revoked automatically.
Governing law and contact
The Terms are governed by Greek law. The courts of Athens have jurisdiction. For questions: legal@marrow.gr. For personal data matters: dpo@marrow.gr.